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AMENDMENTS TO THE CLAIMS 

Please amend claims 1, 4, 6, 10, 12, and 17 as set forth below. 

1 . (CURRENTLY AMENDED) A public key certificate issuing system comprising: 

a certificate authority for issuing a public key certificate of an entity which uses 
said public key certificate; and 

a registration authority for sending a public key certificate issuing request 
received from an entity under control to said certificate authority; said certificate authority being 
constituted by a plurality of certificate authorities each executing a different signature algorithm, 
transferring a public key certificate between said plurality of certificate authorities in response to 
said public key certificate issuing request received from said registration authority, attaching a 
digital signature on message data constituting said public key certificate in accordance with said 
different signature algorithm at each certificate authority, and issuing a multi-signed public key 
certificate storing a plurality of signatures based on different signature algorithms algorithms, 

wherein said public key certificate includes at least a basic area and an extended 

area . 

2. (ORIGINAL) The public key certificate issuing system according to claim 1, wherein 
said plurality of certificate authorities include a Rivest-Shamir-Adleman certificate authority for 
executing signature generation processing based on a Rivest-Shamir-Adleman signature 
algorithm and an elliptic curve cryptography certificate authority for executing signature 
generation processing based on an elliptic curve cryptography algorithm, said signatures stored 
in said multi-signed public key certificate including a signature based on said Rivest-Shamir- 
Adleman signature algorithm and a signature based on said elliptic curve cryptography signature 
algorithm. 

3. (ORIGINAL) The public key certificate issuing system according to claim 1, wherein 
at least one of said plurality of certificate authorities has a configuration for executing processing 
of storing a generated signature and signature information including signature algorithm 
information associated with said generated signature into an extended area of said public key 
certificate. 
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4. (CURRENTLY AMENDED) The public key certificate issuing system according to 
claim 1, wherein at least one of said plurality of certificate authorities has a configuration for 
executing processing of storing a generated signature into an area other than a- the basic area and 
aa - the extended area of said public key certificate and storing signature information including 
signature algorithm information associated with said generated signature into said extended area. 

5. (ORIGINAL) The public key certificate issuing system according to claim 1, wherein 
at least one of said plurality of certificate authorities has a configuration for executing processing 
of storing, into said public key certificate, flag information indicating whether at least two 
signatures are included in said public key certificate. 

6. (CURRENTLY AMENDED) A public key certificate issuing method having a 
certificate authority for issuing a public key certificate of an entity which uses said public key 
certificate and a registration authority for sending a public key certificate issuing request 
received from an entity under control to said certificate authority to issue said public key 
certificate in response to said public key certificate issuing request from said registration 
authority, said certificate authority being constituted by a plurality of certificate authorities each 
executing a different signature algorithm, including the steps of: 

storing basic data in a basic area of the public key certificate; 

storing extended data in an extended area of the public key certificate; 

generating a digital signature based on a first signature algorithm derived from 
the stored basic data and extended data; 

transferring a public key certificate between said plurality of certificate 
authorities in response to said public key certificate issuing request received from said 
registration authority; 

attaching a - the digital signature on message data constituting said public key 
certificate in accordance with said different signature algorithm at each certificate authority; and 

issuing a multi-signed public key certificate storing a plurality of signatures based 
on different signature algorithms. 

7. (ORIGINAL) The public key certificate issuing method according to claim 6, 
wherein at least one of said plurality of certificate authorities executes a step of generating a 
signature for a signed public key certificate by applying a signature algorithm which is different 
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from that attached to said signed public key certificate and attaching the generated signature to 
said signed public key certificate. 

8. (ORIGINAL) The public key certificate issuing method according to claim 6, 
wherein said plurality of certificate authorities include a Rivest-Shamir-Adleman certificate 
authority for executing signature generation processing based on a Rivest-Shamir-Adleman 
signature algorithm and an elliptic curve cryptography certificate authority for executing 
signature generation processing based on an elliptic curve cryptography signature algorithm, said 
Rivest-Shamir-Adleman certificate authority executes signature generation processing based on 
said Rivest-Shamir-Adleman signature algorithm, said elliptic curve cryptography certificate 
authority executes signature generation processing based on said elliptic curve cryptography 
signature algorithm, and said multi-signed public key certificate, including a signature based on 
said Rivest-Shamir-Adleman signature algorithm and a signature based on said elliptic curve 
cryptography signature algorithm, is issued. 

9. (ORIGINAL) The public key certificate issuing method according to claim 6, 
wherein at least one of said plurality of certificate authorities executes processing of storing a 
generated signature and signature information including signature algorithm information 
associated with said generated signature into an extended areas of said public key certificate. 

10. (CURRENTLY AMENDED) The public key certificate issuing method according 
to claim 6, wherein at least one of said plurality of certificate authorities executes processing of 
storing a generated signature into an area other than a - the basic area and an- the extended area of 
said public key certificate and storing signature information including signature algorithm 
information associated with said generated signature into said extended area. 

1 1 . (ORIGINAL) The public key certificate issuing method according to claim 6, 
wherein at least one of said plurality of certificate authorities executes processing of storing, into 
said public key certificate, flag information indicating whether at least two signatures are 
included in said public key certificate. 

12. (ORIGINAL) An information processing apparatus for executing verification of a 
public key certificate, having a configuration for selecting, from among a plurality of signature 
algorithms recorded in signature information stored in a basic area and an extended area of said 
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public key certificate, a signature algorithm which can be verified by said information 
processing apparatus and executing signature verification on the basis of the selected signature 
algorithm. 

Claims 13 - 16 are CANCELED. 

17. (CURRENTLY AMENDED) A program storage medium for providing a computer 
program for executing public key certificate issuing processing for issuing a public key 
certificate of an entity which uses said public key certificate, said computer program comprising 
the step-e f steps of: 

storing basic data in a basic area of the public key certificate; 

storing extended data in an extended area of the public key certificate; 

generating a first signature based on the a first signature algorithm derived from 
the stored basic data and extended data; 

attaching the first digital signature to the public key certificate; 
generating, with the use of a second signature algorithm different from that of a 
the first signature attached to said public key certificate, a second signature and 

attaching said second signature to said public key certificate. 
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